[Feedback]: Referencing UUIDs from upstream models

[Telos-sa]

This is a ...

request - need something additional provided

This relates to ...

• [ ] the FedRAMP OSCAL Registry
• [ ] the FedRAMP OSCAL baselines
• [ ] the Guide to OSCAL-based FedRAMP Content
• [ ] the Guide to OSCAL-based FedRAMP System Security Plans (SSP)
• [ ] the Guide to OSCAL-based FedRAMP Security Assessment Plans (SAP)
• [ ] the Guide to OSCAL-based FedRAMP Security Assessment Results (SAR)
• [ ] the Guide to OSCAL-based FedRAMP Plan of Action and Milestones (POA&M)
• [ ] the FedRAMP SSP OSCAL Template (JSON or XML Format)
• [ ] the FedRAMP SAP OSCAL Template (JSON or XML Format)
• [ ] the FedRAMP SAR OSCAL Template (JSON or XML Format)
• [ ] the FedRAMP POA&M OSCAL Template (JSON or XML Format)
• [X] the FedRAMP OSCAL Validations

What is your feedback?

When generating the SAP and POA&M models, there is an error when trying to reference the UUID's from within an attached SSP.

The SSP is linked in the backmatter, and in the same directory as the SAP and POA&M. But trying to reference component uuid's, and inventory uuids fails across models.

Need to understand if these elements need to be locally defined in the model, in order to cross reference. Or if there is a prescribed structure or method to be able to extract and reference these uuid's downstream?

Where, exactly?

Validating downstream dependencies.

Other information

No response

[aj-stein-gsa]

Sounds like we need to discuss @resource-fragment and the applicability to the constraints for which you are seeing the error.

[aj-stein-gsa]

Per discussion today, @Telos-sa, can you please present one of the errors you have with import-ap that led to this report. It is meaningful and possibly actionable, but I want to know a good starting point and how we will incorporate this feedback and my suggestion in https://github.com/GSA/fedramp-automation/issues/914#issuecomment-2485947344. Thanks!

[aj-stein-gsa]

Marking blocked until we get feedback. Will check back periodically if there is no notification with reply or I miss to keep us honest. 😄